As millions of shoppers gear up for Amazon Prime Day, scammers are gearing up right along with them. Criminals are blasting out fake emails, texts and social media posts designed to look like official Amazon communications, and experts say even savvy shoppers can be fooled by how convincing these messages have become.
According to WSB-TV, criminals are now using powerful new AI tools to build clone websites that can look nearly identical to the real Amazon site in just seconds. That speed is what makes this year's wave of scams especially dangerous: a shopper searching for a deal can land on a fake page before they even realize something is off.
A Fake Billing Alert Caught in the Act
One recent example shows how these campaigns actually work. A phishing operation investigated on September 29 told victims their Prime membership had been suspended over a payment problem and gave them just 48 hours to update their billing information, according to Hackread. The fake site reproduced pieces of Amazon and Prime Video's branding closely enough to seem legitimate at a glance.
Once a victim entered their information, the operators walked away with more than just a login. The outlet reports that the credentials entered into these pages hand scammers the victim's Amazon username and password, along with other personal details and full credit or debit card numbers.
Why Shoppers Keep Falling For It
Part of the problem is psychological, not technical. Major shopping events create the exact conditions scammers rely on, per McAfee: urgency, distraction and the promise of savings. The company's research found that 40% of consumers say they would trust a lower-priced deal without verifying it first, while 29% admit they would skip researching a seller altogether if the price looked good enough. McAfee also found that 23% of consumers feel pressure to act quickly before an online deal disappears, which is exactly the instinct scammers are counting on. Common tactics the company has tracked include fake package alerts, bogus account or order problem messages, and QR codes that quietly redirect shoppers to fraudulent websites.
The numbers suggest this isn't a fringe problem. Amazon reported that email impersonation scams jumped 50% during Prime Day in 2024 compared with the weeks leading up to the sale, as reported by CNET. The outlet also notes that AI-powered tools now let cybercriminals quickly create fake websites that convincingly impersonate companies like Amazon, lowering the skill and time needed to launch a convincing campaign.
Scam Volume Keeps Climbing
The scale of fake Amazon infrastructure floating around the internet is substantial. Check Point researchers identified more than 1,000 new websites with Amazon-like domain names in a single recent month, and about 87% of those were flagged as malicious or suspicious, the CNET report notes. Separately, McAfee found more than 36,000 fake Amazon sites and over 75,000 delivery and Amazon impersonation scam texts in the run-up to Prime Day, and in a McAfee survey, 15% of Americans said they had been scammed during Prime Day or a similar shopping event, with 84% of those people reporting they lost money.
Amazon's own data shows the problem accelerating. Reports of email-based impersonation scams increased by 68% per day during the busy 2025 shopping period, Hackread notes, citing Amazon figures. Email remained the top contact method used by impersonation scammers last year, accounting for 40% to 50% of U.S. customer reports, according to Amazon's own scam-trends data. Text-based scams grew fast too, climbing from 3% of reported scams in the first quarter of 2025 to 13% by the fourth quarter.
What Amazon Says It Will Never Do
Amazon's guidance is specific about what a genuine communication looks like. The company says it will not request sensitive information outside its own website or app, and it will not ask customers to pay by phone, text or email, per the same scam-trends page. Shoppers who want to verify a suspicious order notice should check order numbers directly through the Amazon app or website, or review genuine messages through the Message Center tied to their account, rather than clicking a link in an email or text.
For anyone who has already entered information into a suspicious page, Amazon's advice is immediate action. Customers who disclosed account information should change their password right away, while those who submitted banking details should contact their financial institution and report the scam, Hackread notes, citing Amazon's guidance. As Prime Day approaches, experts' warning is simple: a single wrong click on a message that looks like it's from Amazon could end up costing a shopper far more than they planned to save.
